ntlmssp
Microsoft Windows NT 4.0 Patch: NTLMSSP Privilege Update
This update resolves the NTLMSSP Privilege Elevation security vulnerability present in Windows NT? 4.0, and is discussed in Microsoft Security Bulletin MS01-008 more>> This update resolves the "NTLMSSP Privilege Elevation" security vulnerability present in Windows NT? 4.0, and is discussed in Microsoft Security Bulletin MS01-008. Download now to prevent a malicious user from gaining administrative access to your computer.
This vulnerability exists because the NTLM Security Support Provider (NTLMSSP), which handles authentication requests associated with the NTLM Protocol, allows local user accounts to initiate a specially formed request to execute code by using LocalSystem security privileges. (These security privileges are equal to or greater than those of a local administrator account.) With these privileges, a malicious user with the ability to log on to a computer by using valid user credentials could exploit the vulnerability and send a request to the NTLMSSP that contains specially formatted commands to gain complete control over the computer.
For more information about this vulnerability, please read Microsoft Security Bulletin MS01-008.
<<lessMicrosoft Windows NT 4.0 Patch: NTLMSSP Privilege Elevation Update
Microsoft Windows NT 4.0 Patch: NTLMSSP Privilege Elevation Update is designed for solving the NTLMSSP Privilege Elevation security vulnerability present in Windows NT® 4.0, and is discussed in Microsoft Security Bulletin MS01-008 more>> <<less
Windows NT NTLMSSP Privilege Elevation Vulnerability Patch MS01-008 (2/7/01)
Windows NT NTLMSSP Privilege Elevation Vulnerability Patch MS01-008 (2/7/01) is designed to meet all your needs of handling NTLM authentication requests, and runs by default on all Windows NT 4.0 systems. more>>
Windows NT NTLMSSP Privilege Elevation Vulnerability Patch MS01-008 (2/7/01) is designed to meet all your needs of handling NTLM authentication requests, and runs by default on all Windows NT 4.0 systems.
A flaw in the service's implementation could allow a service request from an unprivileged process to cause code to run in the context of the NTLMSSP service, which runs with Local System privileges. This could enable attackers to programmatically levy requests that would have the effect of running the codes of their choice with System privileges. Workstations and terminal servers are the machines at greatest risk under most conditions.
- Page: 1 of 1
- 1
